windows-iso-downloader/backend
Shekhar Vaidya 37f947cb32 refactor(backend): validate numeric IDs and use url.Values for upstream URLs
- Reject non-numeric product_id and sku_id with HTTP 400 before any
  upstream request is made, preventing parameter injection into
  Microsoft API query strings.
- Replace all fmt.Sprintf URL construction with url.Values.Set +
  .Encode() across handleSkuInfo, handleProxy, and setupSession,
  ensuring values are always percent-encoded correctly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-12 19:00:09 +05:30
..
Dockerfile fix: remove public folder copy from Dockerfile 2026-04-10 20:56:08 +05:30
go.mod fix: downgrade go version to 1.22 and ensure go.sum is tracked 2026-04-10 20:40:01 +05:30
go.sum fix: remove go.sum from ignore list 2026-04-10 20:33:36 +05:30
main.go refactor(backend): validate numeric IDs and use url.Values for upstream URLs 2026-05-12 19:00:09 +05:30